Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier: CCqtl2mZEk0wADtBjTZvz6D94GEGTgrw8SvBwZ+ft/Q=
Subject key identifier: 61:71:AF:10:CB:43:4A:09:02:60:14:DD:43:46:58:78:5D:2A:D8:04
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 019CABD8FA396472C2B3FE2F12AB19EB5C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number: 0B17
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa (hash: 3PuiohsJTgVZuvcSVKeFTaxJ6yWBheVkQayWdYArdx0=)
2: rYfhpRHyVYaDgETn8bVAeDRcfcw.roa (hash: RBBw7oingd7PNWXzXnBorOXFXIc0NmsGTz5l0deTzRU=)
3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: 7HJZHwrrapXLRGu7P6ybc1hu/upN9+7BRxPP6uYef/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fa:39:64:72:c2:b3:fe:2f:12:ab:19:eb:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=6171af10cb434a09026014dd434658785d2ad804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:a2:32:e3:76:bf:6f:42:c8:d1:e6:b4:0b:
ed:53:30:79:dc:8a:a2:a4:b5:1d:ed:c1:91:7f:13:
9b:bb:74:37:ee:e8:09:32:19:08:e4:ed:00:e8:77:
7d:35:66:e7:9b:51:35:00:71:7c:5f:16:82:80:f2:
d7:d3:2e:e8:02:97:80:a9:55:96:39:2d:d4:be:9c:
06:4f:02:f7:39:58:bd:c2:1e:ac:62:2e:64:de:64:
7a:47:a8:f4:6a:cf:99:26:4b:9c:e7:92:97:8c:17:
59:bd:66:34:dd:2f:85:e0:96:c3:92:fe:73:c1:47:
52:0e:37:78:fc:7f:65:e9:00:f1:7c:ff:85:87:84:
0b:4f:fb:8d:30:d8:82:03:0f:15:43:08:3f:2d:89:
1b:7a:78:15:8e:f3:2a:a8:d5:8d:f6:dc:bc:b1:46:
76:20:70:91:43:8f:8d:ab:18:c6:66:e4:27:df:8e:
85:c2:44:c9:56:79:1e:e1:34:14:ca:77:b4:7b:f6:
c2:90:74:6a:d8:37:7b:7e:8c:5e:5b:fc:41:f0:1e:
7a:ee:85:c1:44:75:6e:e3:db:b8:84:a2:72:93:1c:
b4:91:59:25:2b:8a:08:03:3b:50:bb:88:57:95:a0:
ed:83:3f:6f:04:11:e4:3d:c1:7e:2c:20:31:73:a6:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:71:AF:10:CB:43:4A:09:02:60:14:DD:43:46:58:78:5D:2A:D8:04
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f3:e3:1c:a4:16:d0:02:76:e9:3d:2c:17:cf:88:16:01:f9:
fd:05:45:50:fa:da:d6:12:d3:38:d1:a7:98:06:c1:72:1e:fa:
26:31:d7:e7:ce:18:2b:24:14:8d:31:84:e8:6d:c4:35:66:64:
91:41:bc:a0:4d:46:8c:64:f5:2c:74:60:c4:1f:9f:a9:c7:d8:
ee:a6:68:6d:5c:da:0c:bb:8a:8c:7d:9d:4e:62:1f:5c:14:e9:
3a:3f:14:10:77:1d:62:00:4b:88:d9:41:6d:bf:14:4e:ee:ab:
7c:03:a8:9e:cd:d4:a4:38:62:c2:18:85:10:3c:12:b6:23:4a:
2a:b7:46:5d:f9:25:59:b4:8c:de:a5:70:ea:75:49:66:5c:82:
d9:6d:c1:a9:eb:6c:d6:70:76:28:60:9c:b1:eb:64:80:d4:27:
2b:ef:38:91:e4:9e:a3:73:76:20:a4:10:01:db:01:88:82:49:
c9:8b:c1:a5:dd:a7:9e:00:0b:b3:1c:49:a3:f1:02:d0:b0:77:
fc:a2:8c:61:97:5c:d5:e4:51:6a:22:db:44:f2:91:78:db:b8:
ae:05:95:28:18:a2:31:85:6a:67:5c:a6:ce:56:db:74:30:85:
df:c0:f6:19:70:c9:88:b4:f3:98:62:14:51:38:eb:76:06:f4:
69:52:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:00 2026 by rpki-client